isn't /dev/null also a valid nologin option for system accounts